Attestations for
  ghcr.io/kapsl-sh/file@sha256:68595c29d4c5da6bf0dfa380a71fa361799226a4f0eeccc1c0df64d73fe5bd40

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/file@sha256:68595c29d4c5da6bf0dfa380a71fa361799226a4f0eeccc1c0df64d73fe5bd40

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:07c018f8def834981ab9c559ae1b2e793fb02500d1bab26ec7cb3885d37188c0  (2195 bytes)
  signature  sha256:67ccc82904861b31b58f53d97ee976ce0829bb092c6286e89efb58563f974a40  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:52c8ef18bd25b81c245682348a99966e155c5ab469b327921cfc8379800f6e13  (6795 bytes)
  signature  sha256:ab6bd9e18f7e9d5a59188ec507c5eece34943627818ba1e032c376561800db51  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:0cd0cf39e9cc3be4d7022d290a5f82dbc1fe0d51693809d3e32035745c140a41  (3574 bytes)
  signature  sha256:26a0e4ad2c0df5991a286f62de30ae3a995b699ede1d59fc33550579ec6f6c70  (vex.json.sigstore)